eaea4a850d44f00be8cad1d70ea72bcc-my-sharepoint[.]isomerlcindustries[.]com

This domain hosted a fraudulent site presenting a Cloudflare browser verification page ("Please stand by, while we are checking your browser..."), a common tactic used to mask phishing or malware distribution by imitating a security check. The domain name mimics a Microsoft SharePoint login page, incorporating "sharepoint" and "microsoftonline" in its structure to impersonate Microsoft's legitimate authentication flow. The site poses a threat by potentially harvesting user credentials or delivering malware, leveraging the fake browser check to appear legitimate.

Technical analysis shows the site was flagged by 18 out of 95 VirusTotal vendors, including ADMINUSLabs, Criminal IP, BitDefender, Certego, and CRDF. It is listed on 2 blocklists. The domain was registered on 2025-09-03 through Wild West Domains, LLC, with nameservers ns1.bdm.microsoftonline.com and ns2.bdm.microsoftonline.com. The IP address 143.110.174.101 is hosted in GB on AS14061 DigitalOcean, LLC. No SSL certificate was present.

The domain is currently offline and non-responsive. Given the low ScamAdviser trust score of 1/100, high detection rate, and clear impersonation of Microsoft infrastructure, this site represents a high-risk threat. Its brief registration period and lack of encryption further indicate malicious intent.